Ransomware - Cyber Security Informer

Lessons from a Ransomware Attack against the British Library

Schneier on Security

MARCH 29, 2024

You might think that libraries are kind of boring, but this self-analysis of a 2023 ransomware and extortion attack against the British Library is anything but.

Ransomware

BlackCat Ransomware Raises Ante After FBI Disruption

Krebs on Security

DECEMBER 19, 2023

Federal Bureau of Investigation (FBI) disclosed today that it infiltrated the world’s second most prolific ransomware gang, a Russia-based criminal group known as ALPHV and BlackCat. BlackCat formed by recruiting operators from several competing or disbanded ransomware organizations — including REvil , BlackMatter and DarkSide.

Ransomware

Ransomware Cybercrime Advertising Encryption

Ransomware Payments Are Down

Schneier on Security

JANUARY 31, 2023

Chainalysis reports that worldwide ransomware payments were down in 2022. Ransomware attackers extorted at least $456.8 When we published last year’s version of this report, for example, we had only identified $602 million in ransomware payments in 2021. million from victims in 2022, down from $765.6

Ransomware

Ransomware Cryptocurrency Cybercrime

LockBit, RAGroup Drive Ransomware Attacks in March

Security Boulevard

APRIL 30, 2024

Global ransomware attacks rose slightly in March compared to the previous month, as ransomware cabal RAGroup ramped up activity by more than 300%. However, overall activity declined 8% year-over-year, according to NCC Group’s latest ransomware report. The cyber gang LockBit 3.0 The cyber gang LockBit 3.0

Ransomware

Ransomware Malware Cybersecurity

Cybersecurity Predictions for 2024

Within the past few years, ransomware attacks have turned to critical infrastructure, healthcare, and government entities. Attackers have taken advantage of the rapid shift to remote work and new technologies. Add to that hacktivism due to global conflicts and U.S.

Cybersecurity

Ransomware Attacks are Up, but Profits are Down: Chainalysis

Security Boulevard

MAY 8, 2024

In the ever-evolving world of ransomware, it’s getting easier for threat groups to launch attacks – as evidence by the growing number of incidents – but more difficult to make a profit. The post Ransomware Attacks are Up, but Profits are Down: Chainalysis appeared first on Security Boulevard.

Ransomware

Ransomware Cybercrime Data privacy Mobile

2023 Ransomware Attack Report

Security Boulevard

FEBRUARY 13, 2024

The 2023 ransomware attack report summarizes the major changes we saw in ransomware trends and tactics by geography, sector and variant. The post 2023 Ransomware Attack Report appeared first on Security Boulevard.

Ransomware

UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

Security Boulevard

APRIL 23, 2024

The ransomware group that attacked a subsidiary of UnitedHealth Group stole massive amounts of customers’ private health care data, the latest in a continuing string of information coming out about the data breach. The post UnitedHealth: Ransomware Attackers Stole Huge Amount of Data appeared first on Security Boulevard.

Ransomware

Ransomware Data breaches Healthcare Data privacy

Sophos Study: 94% of Ransomware Victims Have Their Backups Targeted By Attackers

Tech Republic Security

APRIL 12, 2024

Research has found that criminals can demand higher ransom when they compromise an organisation’s backup data in a ransomware attack. Discover advice from security experts on how to properly protect your backup.

Backups

Backups Ransomware Cybersecurity

How Preparation and Strategy Can Be Used to Fight and Defeat Any Ransomware Attack

Speaker: Karl Camilleri, Cloud Services Product Manager at phoenixNAP

Did you know that 2021 was a record-breaking year for ransomware? Considering the possible impact and the increased threat vector, deploying efficient ransomware protection must remain a priority for organizations of all sizes. Ransomware growth trends and stats. The costs and impact of a ransomware attack.

Ransomware

BlackCat Ransomware Site Seized in International Takedown Effort

Tech Republic Security

DECEMBER 20, 2023

The ransomware group, which has distributed ransomware to more than 1,000 victims, reportedly recovered control of its website on Tuesday. Learn how to defend against ransomware.

Ransomware

Ransomware Cybersecurity

Russian Hacker Indicted as Mastermind Behind LockBit Ransomware

SecureWorld News

MAY 9, 2024

Department of Justice has unsealed charges against a Russian national accused of developing and operating the notorious LockBit ransomware, one of the most destructive and lucrative cybercrime operations in recent years. Deputy Attorney General Lisa Monaco stated, "We are using all our tools to hold ransomware actors accountable."

Ransomware

Ransomware Cybercrime Government Accountability

NoEscape Ransomware, AvosLocker Ransomware, Retch Ransomware, S-H-O Ransomware and More: Hacker’s Playbook Threat Coverage Round-up: October 31st, 2023

Security Boulevard

OCTOBER 31, 2023

New and updated coverage for ransomware and malware variants, including NoEscape ransomware, AvosLocker ransomware, and others. The post NoEscape Ransomware, AvosLocker Ransomware, Retch Ransomware, S-H-O Ransomware and More: Hacker’s Playbook Threat Coverage Round-up: October 31st, 2023 appeared first on SafeBreach.

Ransomware

Ransomware Malware

As of May 2024, Black Basta ransomware affiliates hacked over 500 organizations worldwide

Security Affairs

MAY 12, 2024

Black Basta ransomware affiliates have breached over 500 organizations between April 2022 and May 2024, FBI and CISA reported. The FBI, CISA, HHS, and MS-ISAC have issued a joint Cybersecurity Advisory (CSA) regarding the Black Basta ransomware activity as part of the StopRansomware initiative.

Ransomware

Ransomware Hacking Healthcare Retail

5 Key Findings From the 2023 FBI Internet Crime Report

The losses companies suffered in 2023 ransomware attacks increased by 74% compared to those of the previous year, according to new data from the Federal Bureau of Investigation (FBI). Ransomware attackers can potentially paralyze not just private sector organizations but also healthcare facilities, schools, and entire police departments.

Identity Theft

Ascension redirects ambulances after suspected ransomware attack

Bleeping Computer

MAY 10, 2024

healthcare network, is diverting ambulances from several hospitals due to a suspected ransomware attack that has been causing clinical operation disruptions and system outages since Wednesday. [.] Ascension, a major U.S.

Ransomware

Ransomware Healthcare

Harnessing Artificial Intelligence for Ransomware Mitigation

Security Boulevard

FEBRUARY 7, 2024

Without AI, organizations will continue to suffer and struggle with recovery when faced with ransomware and other cyberattacks. The post Harnessing Artificial Intelligence for Ransomware Mitigation appeared first on Security Boulevard.

Artificial Intelligence

Artificial Intelligence Ransomware Data privacy Malware

LockBit Ransomware Group Returns After Law Enforcement Operation

Security Boulevard

FEBRUARY 26, 2024

The LockBit ransomware group is swinging back days after U.S. The post LockBit Ransomware Group Returns After Law Enforcement Operation appeared first on Security Boulevard. and UK law enforcement agencies announced they had disrupted the operations of the prolific cybercrime gang.

Ransomware

Ransomware Cybercrime Malware Cybersecurity

Ransomware drama: Law enforcement seized Lockbit group’s website again

Security Affairs

MAY 5, 2024

FuckRansomware pic.twitter.com/uD09m7AukH — Jon DiMaggio (@Jon__DiMaggio) May 5, 2024 However, researchers at VX-underground have spoken with Lockbit ransomware group administrative staff regarding the return of the old domain and the gang claims law enforcement is lying. Lockbit ransomware group states law enforcement is lying.

Ransomware

Ransomware Cybercrime Cyber Attacks Encryption

The State of Ransomware 2024

Security Boulevard

FEBRUARY 1, 2024

BlackFog's state of ransomware report measures publicly disclosed and non-disclosed attacks globally. The post The State of Ransomware 2024 appeared first on Security Boulevard.

Ransomware

A(nother) Ransomware Saga with a Twist

Security Boulevard

MARCH 29, 2024

The Unfolding of the Cyberattack […] The post A(nother) Ransomware Saga with a Twist appeared first on TuxCare. The post A(nother) Ransomware Saga with a Twist appeared first on Security Boulevard. This incident has sent shockwaves through the U.S. healthcare system, affecting hospitals, clinics, and pharmacies nationwide.

Ransomware

Ransomware Healthcare

LockBit ransomware admin identified, sanctioned in US, UK, Australia

Bleeping Computer

MAY 7, 2024

The FBI, UK National Crime Agency, and Europol have unveiled sweeping indictments and sanctions against the admin of the LockBit ransomware operation, with the identity of the Russian threat actor being revealed for the first time. [.]

Ransomware

Linux variant of Cerber ransomware targets Atlassian servers

Security Affairs

APRIL 17, 2024

Threat actors are exploiting the CVE-2023-22518 flaw in Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. Cado Security Labs recently became aware that Cerber ransomware is being deployed into Confluence servers via the CVE-2023-22518 exploit. ” states Cado Security. ” continues the report.

Ransomware

Ransomware Encryption Malware Accountability

Alert: FBI Warns Of BlackCat Ransomware Healthcare Attack

Security Boulevard

MARCH 12, 2024

In recent months, a concerning trend has emerged within the healthcare sector: the resurgence of BlackCat ransomware attacks. The post Alert: FBI Warns Of BlackCat Ransomware Healthcare Attack appeared first on Security Boulevard.

Healthcare

Healthcare Ransomware Cybersecurity Cyber threats

Cactus Ransomware Targets Qlik Sense Servers

Penetration Testing

APRIL 25, 2024

A public-private partnership in the Netherlands has revealed critical information about a dangerous ransomware group dubbed Cactus that has been actively targeting Qlik Sense servers, a popular business intelligence tool.

Penetration Testing

Penetration Testing Ransomware Malware

Ransomware review: February 2024

Malwarebytes

FEBRUARY 12, 2024

This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. This provides the best overall picture of ransomware activity, but the true number of attacks is far higher.

Ransomware

Ransomware Phishing Technology Scams

City of Wichita shuts down IT network after ransomware attack

Bleeping Computer

MAY 6, 2024

The City of Wichita, Kansas, disclosed it was forced to shut down portions of its network after suffering a weekend ransomware attack. [.]

Ransomware

DragonForce ransomware – what you need to know

Graham Cluley

APRIL 11, 2024

Learn more about the DragonForce ransomware - how it came to prominence, and some of the unusual tactics used by the hackers who extort money from companies with it. Read more in my article on the Tripwire State of Security blog.

Ransomware

Ransomware Data breaches Malware

8Base ransomware operators use a new variant of the Phobos ransomware

Security Affairs

NOVEMBER 19, 2023

8Base ransomware operators were observed using a variant of the Phobos ransomware in a recent wave of attacks. Cisco Talos researchers observed 8Base ransomware operators using a variant of the Phobos ransomware in recent attacks. The ransomware component is then decrypted and loaded into the SmokeLoader process’ memory.

Ransomware

Ransomware Encryption Backups Manufacturing

City street lights “misbehave” after ransomware attack

Graham Cluley

APRIL 24, 2024

But the ransomware attack also had a more unusual impact. The UK's Leicester City Council was thrown into chaos last month when a crippling cyber attack forced it to shut down its IT systems and phone lines. Read more in my article on the Hot for Security blog.

Ransomware

Ransomware Cyber Attacks Data breaches Malware

Russian Hacker Dmitry Khoroshev Unmasked as LockBit Ransomware Administrator

The Hacker News

MAY 7, 2024

National Crime Agency (NCA) has unmasked the administrator and developer of the LockBit ransomware operation, revealing it to be a 31-year-old Russian national named Dmitry Yuryevich Khoroshev. In addition, Khoroshev has been sanctioned by the U.K. Foreign, Commonwealth and Development Office (FCD), the U.S.

Ransomware

Akira Ransomware Group Takes In $42 million from 250 Attacks in a Year

Security Boulevard

APRIL 21, 2024

The Akira ransomware has been around for just more than a year, but has caused its share of damage, racking up more than 250 victims and pulling in about $42 million in ransom, according to law enforcement and cybersecurity agencies in the United States and Europe. Akira was first detected in 2023, showing itself to.

Ransomware

Ransomware Cybersecurity Malware Network Security

Phobos Ransomware Aggressively Targeting U.S. Critical Infrastructure

The Hacker News

MARCH 3, 2024

cybersecurity and intelligence agencies have warned of Phobos ransomware attacks targeting government and critical infrastructure entities, outlining the various tactics and techniques the threat actors have adopted to deploy the file-encrypting malware.

Ransomware

Ransomware Encryption Government Malware

INC ransomware source code selling on hacking forums for $300,000

Bleeping Computer

MAY 13, 2024

A cybercriminal using the name "salfetka" claims to be selling the source code of INC Ransom, a ransomware-as-a-service (RaaS) operation launched in August 2023. [.]

Ransomware

Ransomware Hacking

Ransomware review: March 2024

Malwarebytes

MARCH 12, 2024

This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. This provides the best overall picture of ransomware activity, but the true number of attacks is far higher. Our prediction?

Ransomware

Ransomware Healthcare Technology Phishing

6 Reasons Your Business Should Have Ransomware Plan

Security Boulevard

MARCH 18, 2024

In the ever-evolving landscape of cybersecurity threats, ransomware has emerged as one of the most formidable and costly challenges facing businesses of all sizes. In 2024, having a comprehensive ransomware protection plan in place […] The post 6 Reasons Your Business Should Have Ransomware Plan appeared first on SternX Technology.

Ransomware

Ransomware Cyber Attacks Technology Risk

Cactus ransomware gang claims the Schneider Electric hack

Security Affairs

JANUARY 30, 2024

Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack. The attack was carried out by the Cactus ransomware gang , which claims to have stolen terabytes of corporate data from the company. The Cactus ransomware relies on multiple legitimate tools (e.g.

Ransomware

Ransomware Hacking Data breaches Digital transformation

Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers

The Hacker News

APRIL 19, 2024

Threat actors behind the Akira ransomware group have extorted approximately $42 million in illicit proceeds after breaching the networks of more than 250 victims as of January 1, 2024.

Ransomware

Ransomware Cybersecurity

Building Resiliency in the Face of Ransomware

Security Boulevard

MARCH 25, 2024

Ransomware is not going away. The post Building Resiliency in the Face of Ransomware appeared first on SafeBreach. The post Building Resiliency in the Face of Ransomware appeared first on Security Boulevard. So how can organizations defend against it? Dig deeper to learn how to build cybersecurity resiliency.

Ransomware

Ransomware Cybersecurity

Akira ransomware targets Finnish organizations

Security Affairs

JANUARY 13, 2024

The Finish National Cybersecurity Center (NCSC-FI) warns of increased Akira ransomware attacks targeting NAS and tape backup devices of organizations in the country. The Finish National Cybersecurity Center (NCSC-FI) reported an increase in Akira ransomware attacks, targeting organizations in the country. concludes the alert.

Ransomware

Ransomware Backups VPN Authentication

LockBit Ransomware Bounty: US Offers $15 Million In Reward

Security Boulevard

MARCH 3, 2024

Today, we’re turning the spotlight on LockBit ransomware attacks and the unprecedented $15 million bounty offered by the U.S. International cooperation against ransomware is essential in combating cyber threats and safeguarding digital infrastructures worldwide. government to dismantle its operations.

Ransomware

Ransomware Cyber threats Government Cyber Attacks

New ransomware group demands Change Healthcare ransom

Malwarebytes

APRIL 10, 2024

The Change Healthcare ransomware attack has taken a third cruel twist. A new ransomware group, RansomHub, has listed the organisation as a victim on its dark web leak site, saying it has 4 TB of “highly selective data,” which relates to “all Change Health clients that have sensitive data being processed by the company.”

Healthcare

Healthcare Ransomware Backups Software

UnitedHealth confirms it paid ransomware gang to stop data leak

Bleeping Computer

APRIL 23, 2024

The UnitedHealth Group has confirmed that it paid a ransom to cybercriminals to protect sensitive data stolen during the Optum ransomware attack in late February. [.]

Ransomware

Ransomware Healthcare

CISA Warns Phobos Ransomware Groups Attacking Critical Infrastructure

Security Boulevard

MARCH 4, 2024

Phobos, a complex ransomware-as-a-service (RaaS) operation that has been around for five years and is includes multiple variants, continues to target a range of critical infrastructure in the United States, including education, healthcare, and emergency services, according to federal agencies.

Ransomware

Ransomware Healthcare Education Cybersecurity

Lessons from a Ransomware Attack against the British Library

BlackCat Ransomware Raises Ante After FBI Disruption

Trending Sources

Ransomware Payments Are Down

LockBit, RAGroup Drive Ransomware Attacks in March

Cybersecurity Predictions for 2024

Ransomware Attacks are Up, but Profits are Down: Chainalysis

2023 Ransomware Attack Report

UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

Sophos Study: 94% of Ransomware Victims Have Their Backups Targeted By Attackers

How Preparation and Strategy Can Be Used to Fight and Defeat Any Ransomware Attack

BlackCat Ransomware Site Seized in International Takedown Effort

Russian Hacker Indicted as Mastermind Behind LockBit Ransomware

NoEscape Ransomware, AvosLocker Ransomware, Retch Ransomware, S-H-O Ransomware and More: Hacker’s Playbook Threat Coverage Round-up: October 31st, 2023

As of May 2024, Black Basta ransomware affiliates hacked over 500 organizations worldwide

5 Key Findings From the 2023 FBI Internet Crime Report

Ascension redirects ambulances after suspected ransomware attack

Harnessing Artificial Intelligence for Ransomware Mitigation

LockBit Ransomware Group Returns After Law Enforcement Operation

Ransomware drama: Law enforcement seized Lockbit group’s website again

The State of Ransomware 2024

A(nother) Ransomware Saga with a Twist

LockBit ransomware admin identified, sanctioned in US, UK, Australia

Linux variant of Cerber ransomware targets Atlassian servers

Alert: FBI Warns Of BlackCat Ransomware Healthcare Attack

Cactus Ransomware Targets Qlik Sense Servers

Ransomware review: February 2024

City of Wichita shuts down IT network after ransomware attack

DragonForce ransomware – what you need to know

8Base ransomware operators use a new variant of the Phobos ransomware

City street lights “misbehave” after ransomware attack

Russian Hacker Dmitry Khoroshev Unmasked as LockBit Ransomware Administrator

Akira Ransomware Group Takes In $42 million from 250 Attacks in a Year

Phobos Ransomware Aggressively Targeting U.S. Critical Infrastructure

INC ransomware source code selling on hacking forums for $300,000

Ransomware review: March 2024

6 Reasons Your Business Should Have Ransomware Plan

Cactus ransomware gang claims the Schneider Electric hack

Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers

Building Resiliency in the Face of Ransomware

Akira ransomware targets Finnish organizations

LockBit Ransomware Bounty: US Offers $15 Million In Reward

New ransomware group demands Change Healthcare ransom

UnitedHealth confirms it paid ransomware gang to stop data leak

CISA Warns Phobos Ransomware Groups Attacking Critical Infrastructure

Stay Connected